preferred firewall on debian buster

[vryni]

When i installed debian 10 it came to my attention that
it comes with apparmor pre-installed.

Searching for "things to do after installing Debian 10"
i found this guide https://www.linuxtechi.com/things-to-do ... debian-10/
advocating the installation of ufw

Previously using Debian 9 (which came with ufw preinstalled by default)
i used to make some minimal, very basic changes to /etc/ufw/before.rules
telling myself that i was safe behind a firell
I am totally clueless with Apparmor

Should i invest time in learning to use Apparmor ?
or
should i install UFW and if so - do i have to uninstall Apparmor first ?

[p.H]

Previously using Debian 9 (which came with ufw preinstalled by default)

AFAIK Debian 9 did not come with ufw preinstalled by default. Maybe some desktop environment did.

Apparmor is not a firewall, at least not in the common "packet filter" sense like iptables or nftables. It is a security framework which allows to restrict programs' capabilities (including network access).

[andre@home]

Directly go to nftables?

https://linuxandcaffeine.com/setup-a-si ... -nftables/
and:
https://www.google.nl/search?client=ope ... CAo&uact=5

[Head_on_a_Stick]

i used to make some minimal, very basic changes to /etc/ufw/before.rules
telling myself that i was safe behind a firell

Most desktop users don't really need a firewall and running one will not "protect" you in any meaningful way.

EDIT: apparmor does provide significant protections for the average desktop user though, which is why Debian has enabled it by default.